diff options
author | Kees Cook <keescook@chromium.org> | 2023-09-15 22:14:05 +0200 |
---|---|---|
committer | Jan Kara <jack@suse.cz> | 2023-09-18 09:10:31 +0200 |
commit | d1d3fcb324eceee7c4bf34b0ac89942ee16e3b74 (patch) | |
tree | 23d2052f4f8125378a5f61a0cab54ffb96f5cdd4 /fs/udf | |
parent | quota: explicitly forbid quota files from being encrypted (diff) | |
download | linux-d1d3fcb324eceee7c4bf34b0ac89942ee16e3b74.tar.xz linux-d1d3fcb324eceee7c4bf34b0ac89942ee16e3b74.zip |
udf: Annotate struct udf_bitmap with __counted_by
Prepare for the coming implementation by GCC and Clang of the __counted_by
attribute. Flexible array members annotated with __counted_by can have
their accesses bounds-checked at run-time checking via CONFIG_UBSAN_BOUNDS
(for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family
functions).
As found with Coccinelle[1], add __counted_by for struct udf_bitmap.
[1] https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci
Cc: Jan Kara <jack@suse.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Signed-off-by: Jan Kara <jack@suse.cz>
Message-Id: <20230915201404.never.574-kees@kernel.org>
Diffstat (limited to 'fs/udf')
-rw-r--r-- | fs/udf/udf_sb.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/udf/udf_sb.h b/fs/udf/udf_sb.h index 9af6ff7f9747..f9a60bc1abcf 100644 --- a/fs/udf/udf_sb.h +++ b/fs/udf/udf_sb.h @@ -86,7 +86,7 @@ struct udf_virtual_data { struct udf_bitmap { __u32 s_extPosition; int s_nr_groups; - struct buffer_head *s_block_bitmap[]; + struct buffer_head *s_block_bitmap[] __counted_by(s_nr_groups); }; struct udf_part_map { |